Zsolt Dollenstein fbfc000904 [ty] Add runtime threat models for Ruff and ty (#28523) ...

## Summary

The repository threat model in #28395 covers CI and release automation.
Ruff and ty also need security guidance for their command-line tools,
libraries, language servers, and browser playgrounds.

Add three models that define trusted inputs, security invariants, and
severity for these components, including the public playground sharing
API. An index linked from `AGENTS.md` points reviewers to the applicable
models.

Depends on #28395.

## Test Plan

Reviewed the trust assumptions and execution paths against the CLI,
language-server, and playground code.

2026-09-15 17:42:18 +01:00

..

cli-threat-model.md

[ty] Add runtime threat models for Ruff and ty (#28523)

2026-09-15 17:42:18 +01:00

language-server-threat-model.md

[ty] Add runtime threat models for Ruff and ty (#28523)

2026-09-15 17:42:18 +01:00

playground-threat-model.md

[ty] Add runtime threat models for Ruff and ty (#28523)

2026-09-15 17:42:18 +01:00

repository-threat-model.md

Add a GitHub repository threat model for Ruff (#28395)

2026-09-11 18:00:17 +01:00

threat-models.md

[ty] Add runtime threat models for Ruff and ty (#28523)

2026-09-15 17:42:18 +01:00